Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2133a9e1-9f3c-4662-b3c3-5cea0c9406cc.roa
File: 2133a9e1-9f3c-4662-b3c3-5cea0c9406cc.roa (raw, json)
Hash identifier: KC0f1050YnyTzIbjtror2T1M/Q8lWgkMUkVHN0yNbdM=
Subject key identifier: EC:8D:71:F5:36:4D:65:77:B5:73:EC:75:62:27:33:58:07:66:02:C8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 177DB961320B89E7E479FA6DA0D686B1AF55E56A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2133a9e1-9f3c-4662-b3c3-5cea0c9406cc.roa
Signing time: Fri 11 Jul 2025 19:41:29 +0000
ROA not before: Fri 11 Jul 2025 19:41:29 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:9080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:7d:b9:61:32:0b:89:e7:e4:79:fa:6d:a0:d6:86:b1:af:55:e5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 19:41:29 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=fb5da4d7a9b5d9ae3b7282492b303c203ff21bae16e531ad2b99cc62a2cb2c86, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:42:16:66:12:37:82:b2:1c:ec:76:e8:21:17:
b4:99:bb:05:7a:23:82:6f:29:0b:60:7e:54:a1:3a:
63:fa:87:04:b3:b1:ca:33:c4:ec:cb:c1:b3:26:b8:
75:0d:3d:ec:32:25:90:34:3c:69:07:c7:32:e1:f4:
c4:6c:0b:c6:8e:f1:02:f7:81:4f:d5:44:33:1e:91:
33:ef:f2:0d:c8:53:c4:c8:78:58:72:79:a9:2f:d9:
6e:e6:cb:48:fb:3f:2d:f1:82:ec:da:90:4a:74:e6:
f5:8d:9c:98:f4:a5:46:cf:43:67:4c:4b:68:66:08:
c4:86:4e:0a:a3:2e:b3:2c:a6:e3:9e:53:a7:0c:80:
c8:b6:79:b2:da:12:29:48:dc:a7:49:62:d0:73:e8:
a4:47:52:ae:0a:49:5a:fd:f8:37:23:f8:e5:3c:4b:
86:63:21:13:f6:00:6d:ba:75:4c:37:40:77:50:84:
61:6d:cb:34:cd:84:76:46:58:48:18:c5:27:f7:ce:
a6:1c:e3:64:2d:1a:e7:99:3f:95:64:20:1f:19:fd:
34:f2:6c:b7:8a:4c:ea:c0:79:f6:73:d1:4a:00:51:
be:42:c2:d6:e3:b1:7c:b2:2d:f2:e3:70:c8:2c:69:
5d:7b:b8:77:de:71:45:24:24:74:af:7c:00:28:0b:
36:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8D:71:F5:36:4D:65:77:B5:73:EC:75:62:27:33:58:07:66:02:C8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2133a9e1-9f3c-4662-b3c3-5cea0c9406cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:9080::/46
Signature Algorithm: sha256WithRSAEncryption
56:98:10:59:c3:46:fc:87:22:79:a9:0d:36:bd:7c:d0:a0:f9:
8a:5d:8f:47:35:e1:17:65:db:68:bf:62:20:fa:77:5f:12:4e:
a0:1f:cc:2c:87:08:4a:17:40:46:db:24:73:78:1c:9d:5e:99:
4e:c1:06:5d:ba:20:2a:93:05:39:8b:e7:37:0d:9f:ac:73:38:
72:7e:f9:ea:5b:7f:dd:ac:e4:f0:a3:fe:b0:42:12:9a:6a:5b:
3b:5a:86:20:2e:f8:99:4b:be:bf:4a:45:e8:da:76:b2:7e:95:
2e:4a:2a:e0:f7:ae:1c:47:b9:09:b6:35:96:14:f9:49:12:67:
5a:6f:5e:26:3f:34:15:f9:d8:e8:6b:cb:7e:4d:81:f1:b4:35:
12:d6:7f:24:50:ae:82:02:ac:26:f4:c5:8b:d7:2a:63:8f:45:
89:b7:a0:3f:66:a8:0d:0b:4a:81:a9:61:eb:5c:c3:d7:2f:5d:
e9:ad:7b:5c:8c:1f:78:48:7b:41:d4:fd:40:22:e1:36:87:ff:
32:82:22:9e:c3:10:e6:4f:ff:5e:f3:ee:52:d5:5c:40:97:99:
b5:72:8b:b3:b5:92:ff:96:fd:10:c6:f0:b8:72:f2:a6:ff:47:
3f:6e:9c:4e:c6:44:7c:61:68:c0:18:9f:52:1b:51:b6:31:fd:
18:77:8b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:51:47 2025 by rpki-client